Itwanger Paicoding Information Disclosure Vulnerability in Browsing History Handler

A vulnerability allowing information disclosure has been identified in Itwanger Paicoding version 1.0.3. The issue arises in the Browsing History Handler component, specifically within the '/user/home?userId=1&homeSelectType=read' file. This vulnerability allows for the unauthorized reading of users' browsing histories, which is not intended to be accessible, thereby threatening user privacy. The issue can be exploited remotely.

Impact

Exploitation of this vulnerability allows for the unauthorized access and disclosure of users' browsing histories, posing a significant risk to user privacy.

Reproduction

To reproduce this vulnerability, access the '/user/home?userId=1&homeSelectType=read' interface. This will directly retrieve the browsing history of other users, which is not visible by design, highlighting a logical flaw in the application's privacy controls.